Lucene search

K
wpexploitYakshita SharmaWPEX-ID:1B0FE0AC-D0D1-473D-AF5B-DAD6217933D4
HistoryMay 24, 2023 - 12:00 a.m.

Upload Resume <= 1.2.0 - Captcha Bypass

2023-05-2400:00:00
Yakshita Sharma
43
upload resume
version 1.2.0
captcha bypass
poc
remediation
exploit

0.001 Low

EPSS

Percentile

23.0%

The plugin does not validate the captcha parameter when uploading a resume via the resume_upload_form shortcode, allowing unauthenticated visitors to upload arbitrary media files to the site.

The PoC will be displayed once the issue has been remediated

0.001 Low

EPSS

Percentile

23.0%

Related for WPEX-ID:1B0FE0AC-D0D1-473D-AF5B-DAD6217933D4